fotografa-de-bodas-españa-madrid

WEBSITE PRIVACY POLICY

www.mariacegarra.es

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, María Cegarra Fotografía (hereinafter, also referred to as the “Website”) is committed to adopting the necessary technical and organizational measures appropriate to the level of security corresponding to the risk associated with the personal data collected.

Legislation Incorporated into This Privacy Policy

This Privacy Policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following laws:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

  • Royal Decree 1720/2007, of December 21, approving the Regulation implementing Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).

  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The Data Controller responsible for the processing of personal data collected on María Cegarra Fotografía is:
María Cegarra Castillo (hereinafter, the “Data Controller”).

Contact details:
Address: Los Alcázares, Murcia (Spain)
Email: mariaccphoto@gmail.com

Personal Data Record

In compliance with the GDPR and the LOPD-GDD, Users are informed that the personal data collected through the forms available on the Website will be incorporated into our system and processed in order to facilitate, streamline, and fulfill the commitments established between María Cegarra Fotografía and the User, or to maintain the relationship established through such forms, or to respond to a request or inquiry.

In accordance with Article 30.5 of the GDPR, a record of processing activities is maintained, specifying, by purpose, the data processing activities carried out and other details required by the regulation.

Principles Governing the Processing of Personal Data

The processing of the User’s personal data will adhere to the following principles as set out in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

  1. Lawfulness, fairness, and transparency: The User’s consent will always be required, after providing transparent information about the purposes for which their personal data is collected.

  2. Purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.

  3. Data minimization: Only the data strictly necessary for the purposes for which it is processed will be collected.

  4. Accuracy: Personal data must be accurate and kept up to date.

  5. Storage limitation: Personal data will be kept only for as long as necessary for processing purposes.

  6. Integrity and confidentiality: Data will be processed securely to ensure confidentiality and protection against unauthorized or unlawful processing, loss, or damage.

  7. Accountability: The Data Controller is responsible for compliance with all the above principles.

Categories of Personal Data

The data processed by María Cegarra Fotografía are exclusively identifying data. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.

Legal Basis for Processing Personal Data

The legal basis for processing personal data is consent.
María Cegarra Fotografía undertakes to obtain the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.

Users have the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, the withdrawal of consent will not affect the use of the Website.

If the User must provide personal data through forms for inquiries, information requests, or purposes related to the Website, they will be informed whether providing such data is mandatory, as some fields may be essential for the proper performance of the requested operation.

Purposes of Data Processing

Personal data collected by María Cegarra Fotografía are used to facilitate, streamline, and fulfill commitments established between the Website and the User, or to maintain the relationship initiated through the forms, or to respond to inquiries or requests.

Additionally, data may be used for commercial, personalization, operational, and statistical purposes, and for activities related to the business purpose of María Cegarra Fotografía, including data extraction, storage, and marketing analysis to tailor content to the User and improve quality, performance, and navigation on the Website.

At the time personal data is obtained, Users will be informed of the specific purpose(s) for which their data will be processed.

Retention Period of Personal Data

Personal data will only be kept for the minimum time necessary for processing purposes, and in any case, for a maximum of 5 years, or until the User requests its deletion.

At the time of collection, Users will be informed of the retention period or, when that is not possible, the criteria used to determine it.

Recipients of Personal Data

The User’s personal data may be shared with the following recipients or categories of recipients:

If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed at the time of data collection of the destination country or organization and of the existence or absence of an adequacy decision by the European Commission.

Personal Data of Minors

In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only Users over 14 years of age may lawfully give consent for the processing of their personal data by María Cegarra Fotografía.
If the User is under 14, parental or guardian consent is required, and processing will only be considered lawful to the extent that it has been authorized by them.

Data Confidentiality and Security

María Cegarra Fotografía undertakes to adopt the necessary technical and organizational measures to ensure an adequate level of security and protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

However, since María Cegarra Fotografía cannot guarantee the absolute invulnerability of the Internet or the absence of hacking or fraudulent access by third parties, the Data Controller commits to notify the User without undue delay of any data breach that is likely to result in a high risk to the rights and freedoms of individuals.

Personal data will be treated as confidential by the Data Controller, who undertakes to ensure, through legal or contractual means, that such confidentiality is respected by employees, collaborators, and any person with access to the information.

User Rights Regarding Data Processing

Users may exercise the following rights recognized in the GDPR and Organic Law 3/2018 before the Data Controller:

  • Right of access: To obtain confirmation of whether María Cegarra Fotografía processes their personal data, and access such data and related information.

  • Right to rectification: To have inaccurate or incomplete personal data corrected.

  • Right to erasure (“right to be forgotten”): To request deletion of personal data when it is no longer necessary, consent is withdrawn, processing is unlawful, or as otherwise provided by law.

  • Right to restriction of processing: To limit data processing in certain circumstances, such as when accuracy is contested or when the User needs data for legal claims.

  • Right to data portability: To receive personal data in a structured, commonly used, machine-readable format and transmit it to another controller when processing is automated.

  • Right to object: To object to the processing of personal data.

  • Right not to be subject to automated decision-making, including profiling: To avoid decisions based solely on automated processing.

Users may exercise these rights by sending a written communication to the Data Controller with the reference “GDPR – www.mariacegarra.es”, including:

  1. Full name and a copy of the User’s ID (or equivalent).
  2. The specific request or right being exercised.
  3. Address for notifications.
  4. Date and signature.
  5. Any supporting documentation.
  6. Requests can be sent to:
    Postal address: C/ La Morera 2, 30710 Los Alcázares, Murcia (Spain)
    Email: mariaccphoto@gmail.com
  1. Links to Third-Party Websites
  2. The Website may contain hyperlinks to third-party websites not operated by María Cegarra Fotografía. The owners of such websites are responsible for their own data protection policies and practices.
  1. Complaints to the Supervisory Authority
  2. If a User believes that their personal data is being processed in violation of applicable law, they have the right to effective judicial protection and may file a complaint with a supervisory authority, particularly in their country of habitual residence, workplace, or the place of the alleged infringement.
  3. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD) – https://www.aepd.es/.
  1. II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
  2. It is necessary for the User to have read and agreed to the conditions regarding the protection of personal data contained in this Privacy Policy, and to consent to the processing of their personal data so that the Data Controller may proceed in accordance with the terms, purposes, and time limits indicated.
    Use of the Website implies acceptance of this Privacy Policy.
  3. María Cegarra Fotografía reserves the right to modify this Privacy Policy according to its own criteria or due to legislative, jurisprudential, or regulatory changes by the Spanish Data Protection Agency (AEPD).
  4. Changes or updates will not be explicitly notified to Users, so Users are encouraged to review this page periodically to stay informed of the latest updates.
  5. This Privacy Policy was updated to comply with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.
  6. This Privacy Policy document was created using a free online privacy policy template generator on October 6, 2025.